4a7d9d967a
Replace custom JSON-LD compilation manifest with valid CycloneDX v1.6 documents using bomType: specBOM and speckl: property namespace. Key changes: - §4.5: Compilation manifest now outputs CycloneDX v1.6 JSON - Added 'Why CycloneDX' section comparing CycloneDX vs SPDX for this use case - Full CycloneDX JSON example for DrugDosageCalculator - Added CycloneDX field mapping table (SpeckDL primitive → CycloneDX location) - Added path to standardization (community proposal → OWASP recognition) - Appendix B restructured into three sections: B.1 Provenance Graph (JSON-LD / PROV-O) — intent layer B.2 SpeckBOM (CycloneDX v1.6) — composition layer B.3 Two-Layer Architecture — how they complement each other This extends an existing OWASP/ECMA-424 standard rather than defining a bespoke format, ensuring compatibility with Dependency-Track and the full CycloneDX tooling ecosystem. |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| SPEC.md | ||
| SPEC.v2-dp-primitives.md | ||